Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa
File:                     39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa (raw, json)
Hash identifier:          uwWmtDylryysoVp50jAkKKNuwU65kRmlqpqRM68AzZw=
Subject key identifier:   E0:01:6E:16:D5:69:B2:23:83:39:1C:F0:E5:2E:7C:2D:C7:C9:29:0F
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584D300A53208CC800CCF5266560
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     21782
IP address blocks:        207.246.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:53:20:8c:c8:00:cc:f5:26:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=65ad13b1-cc7f-44a8-ab3b-d0d128e8a742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:ee:35:69:3c:7e:d9:c5:37:9c:21:ec:1e:
                    fa:53:8a:d5:19:5f:2f:de:ee:3c:70:5a:6c:1b:31:
                    fe:fb:fc:a8:d3:6d:e7:e9:70:38:b8:5e:fd:c5:ba:
                    e4:2e:e6:8c:48:e8:94:fd:f3:68:d2:25:cd:37:65:
                    83:b7:52:97:76:3f:d8:b2:99:40:8a:3a:20:ec:38:
                    eb:f3:15:53:5c:d0:fb:ba:3f:72:49:db:37:eb:f6:
                    f5:d8:f5:3c:74:f4:0f:e4:4e:e0:5b:59:30:ef:3b:
                    45:f0:ce:84:89:57:ae:a8:da:96:61:d6:6c:a6:30:
                    0b:79:ce:8e:98:4d:2e:5c:73:eb:36:e0:1c:03:df:
                    11:94:15:61:12:17:b2:af:8a:70:7a:ef:5e:18:29:
                    97:f4:22:57:bb:95:19:6c:41:06:0f:74:02:9b:46:
                    25:d1:b6:08:9c:a8:51:c7:33:3d:ab:92:f3:32:64:
                    a6:9d:93:45:06:1d:5b:66:95:97:92:2d:e3:ad:d2:
                    7b:43:6a:29:af:2a:a3:27:a9:33:b6:03:6c:94:72:
                    73:01:ad:21:51:a0:91:56:78:4d:e2:b9:81:64:54:
                    2f:f0:d8:61:e3:dc:57:e5:ab:cc:7f:e6:21:f4:da:
                    68:ee:63:a7:7d:c2:df:bc:b2:d1:d3:5b:cc:af:25:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:01:6E:16:D5:69:B2:23:83:39:1C:F0:E5:2E:7C:2D:C7:C9:29:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.246.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:d7:24:33:b6:ce:b1:e8:fb:19:f4:d6:68:13:ad:31:a4:
         bd:2e:5b:37:88:e4:60:43:75:dd:0f:50:be:57:da:d2:a4:88:
         99:78:61:56:3e:4e:4e:0b:99:b0:3a:8f:79:46:30:b8:2c:43:
         4c:62:63:29:ee:a4:54:bc:06:c0:f8:3f:0e:f1:bb:e4:3f:c9:
         ba:ee:24:8a:50:f1:73:27:75:c3:96:40:d0:55:03:d2:e1:d6:
         32:75:db:b4:32:52:3e:f7:b3:6b:42:c6:c9:ce:2e:4f:60:d1:
         7a:36:92:f5:d9:ef:ed:ab:7a:17:d1:64:d2:1c:6b:60:19:63:
         5d:75:a8:3a:cf:5a:90:67:0e:09:66:24:5f:ca:03:90:af:d5:
         5a:c2:7b:28:90:9e:92:fa:75:a8:1d:e7:e7:8f:bb:c7:a8:cc:
         10:9c:12:82:7f:a3:a3:1e:1f:7a:2a:d0:7a:84:16:0c:72:e8:
         80:f0:c2:75:f8:67:97:8c:c6:7b:bf:79:43:92:9e:79:8d:6c:
         99:af:2a:5b:32:02:c9:2d:24:2d:1a:10:2a:a7:59:03:84:ff:
         28:bf:ad:3a:93:39:37:16:2c:13:62:a4:12:15:f7:4b:96:ca:
         83:bb:7f:31:a3:77:20:1a:fc:fe:df:97:2b:c8:96:f0:ad:16:
         33:be:f4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:09 2026 by rpki-client